Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
File:                     vfo6-DmqHc51j0ieLTGuIgkvyZo.mft (raw, json)
Hash identifier:          Eg/CFJWyoHiJcGMPxtSZ6tkKkp+kgH2SEw0OQME2Wl4=
Subject key identifier:   93:36:E3:32:F4:4E:26:8E:04:9D:5E:8F:E5:43:9F:C1:60:16:31:0F
Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
Certificate issuer:       /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Certificate serial:       0197C0ED7F4929146308009E24D32A1509A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
Manifest number:          15BE
Signing time:             Mon 30 Jun 2025 13:01:19 +0000
Manifest this update:     Mon 30 Jun 2025 13:01:19 +0000
Manifest next update:     Tue 01 Jul 2025 13:01:19 +0000
Files and hashes:         1: 02L_0yvjrj7KDTzjU6X6m1mtpQI.roa (hash: n98M+U3c1grhlxXcswrUg59R80vb+hM1RgpHM3qQuPY=)
                          2: 7C0Ptfd131vRO631WH816-TiLmM.roa (hash: vVG6CyuAsSWdSPh0xSG091fPSEug6kwYq/eGfl7DFQA=)
                          3: LDkoUP_y05Q4menYaO8UkXEB7c4.roa (hash: KlbVBac/f0Y5FEisWs64/Ycn/xUCteAxkti9GeZFBNk=)
                          4: qrNw_4pWdm_geFtfy5BpF6RB3Lw.roa (hash: QyClSiOoVb03SqPau0rHxsvXZNW+BEw2UB08FmFuOP0=)
                          5: vfo6-DmqHc51j0ieLTGuIgkvyZo.crl (hash: KvuBw1xq4UlpDdj0sAN1JvQJjt2obYzCU+XhG2bLXPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c0:ed:7f:49:29:14:63:08:00:9e:24:d3:2a:15:09:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
        Validity
            Not Before: Jun 30 13:01:19 2025 GMT
            Not After : Jul  1 13:01:19 2025 GMT
        Subject: CN=9336e332f44e268e049d5e8fe5439fc16016310f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c8:31:ca:c8:8d:1c:75:43:7d:71:1c:54:64:
                    9e:da:3b:d8:12:75:69:44:9e:b9:6b:0b:fd:d0:c6:
                    c0:56:c5:58:7f:fa:33:85:da:c4:de:ef:db:45:f3:
                    3b:e6:fe:5e:71:a8:68:a0:41:13:4f:2a:b6:d4:41:
                    da:ee:0e:f9:4e:e1:cd:64:3b:20:04:fe:6e:28:86:
                    9d:74:05:77:31:8d:7e:fb:77:fd:97:16:fd:1b:8a:
                    47:ab:a2:be:48:b4:0c:28:96:6e:fd:d1:f0:a2:35:
                    6c:62:c9:29:6a:3a:c5:11:39:10:a7:ec:a7:b0:9c:
                    7e:9e:9a:0f:5b:3a:e9:46:b5:d1:b8:d8:58:fd:5d:
                    60:51:94:c8:b2:9a:3e:72:0b:12:f6:e4:fd:55:0a:
                    86:ce:b8:67:15:5a:3e:ab:4a:33:a0:74:19:45:86:
                    26:07:06:bb:05:15:d2:cc:28:01:56:2a:ef:35:78:
                    69:ee:1b:51:4c:18:97:0a:06:a3:ce:48:ef:f9:92:
                    b3:82:06:2b:fe:d6:fb:3f:64:a3:cf:b3:ff:3b:99:
                    37:c8:d1:c9:2e:3a:84:52:80:4c:c3:5d:dd:00:1b:
                    14:1c:fe:f1:3f:68:30:8c:7a:fa:dc:a5:16:ca:1f:
                    0d:67:73:d3:64:28:09:db:96:25:8f:75:83:bc:35:
                    81:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:36:E3:32:F4:4E:26:8E:04:9D:5E:8F:E5:43:9F:C1:60:16:31:0F
            X509v3 Authority Key Identifier:
                keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a0:4e:d8:88:7e:3a:c7:37:7e:45:93:7c:c4:ac:c0:8a:e8:
         c5:12:41:e5:d1:f4:66:31:7f:6a:71:de:32:35:45:7a:c8:25:
         10:e0:01:ca:31:3f:1c:12:e4:d2:39:dd:cf:e9:54:d6:4c:75:
         82:13:50:0a:99:f5:a3:e0:73:a2:78:b5:2f:fb:4b:ae:0f:26:
         d7:1f:26:51:e6:99:cf:22:d6:71:b7:1b:2d:a1:82:10:0e:57:
         54:a8:f6:df:23:ba:0d:12:be:ec:7b:62:29:5f:97:7c:03:6e:
         e9:f4:4d:db:e8:85:44:ae:19:4a:b6:2c:d5:e5:70:26:c9:ca:
         0e:97:53:71:59:c2:c5:6f:4c:2b:fa:7a:57:44:63:de:88:08:
         6a:c3:3e:f0:37:34:b9:07:59:0d:19:7a:6f:fc:e0:1b:67:6e:
         28:fa:eb:0d:3f:57:c5:ee:c9:11:72:5b:bc:08:bd:f7:82:13:
         b5:70:bd:a0:f1:7a:2a:c8:74:55:11:34:6a:cf:ec:4b:25:4a:
         a7:f1:4c:80:79:77:40:96:3b:0a:6f:f7:47:f1:bc:3d:75:17:
         a2:bf:5a:f8:0d:6c:fc:e8:30:ff:34:57:35:50:16:94:65:ba:
         33:bf:83:3a:13:44:be:71:6e:bf:bb:48:73:db:f1:6e:36:4e:
         12:09:c9:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:14:37 2025 by rpki-client